>This one is all over. Variations appear to exist as well. Starting to see
>a lot of them using addresses at winzip.com for originators (help@,
>support@, and sitesales@) lately.
what port is the "listener" listening on?
John